\\^ ' 

\ * TDA Progress Report 42-99 


N90- 19447 

November 15, 1989 


Fast Transform Decoding of Nonsystematic 
Reed-Solomon Codes 

T. K. Truong and K.-M. Cheung 

Communications Systems Research Section 

I. S. Reed 

University of Southern California, Department of Electrical Engineering 
A. Shiozaki 

Osaka Electro-Communication University, Osaka, Japan 


This article considers a Reed-Solomon ( RS ) code to be a special case of a re- 
dundant residue polynomial ( RRP ) code, and presents a fast transform decoding 
algorithm to correct both errors and erasures. This decoding scheme is an im- 
provement of the decoding algorithm for the RRP code suggested by Shiozaki and 
Nishid a [l], and can be realized readily on VLSI chips . 


I. Introduction 

Classes of redundant residue polynomial (RRP) codes 
were introduced first in [3,4]. These codes are constructed 
by use of the Chinese remainder theorem for polynomials 
over a finite field GF(q). The codeword symbols of the 
RRP codes are expressed as polynomials over this field. 
The RRP codes can correct t error symbols with the aid 
of 2 1 redundant symbols. 

Reed-Solomon (RS) codes constitute a subclass of 
RRP codes and are used in many sectors of today's indus- 
try. Some examples are the (255,223) 16-error-correcting 
RS code (NASA code) used in deep-space communications, 
the (31,15) 8-error-correcting RS code (JTIDS code) used 


in military communications, and the Cross Interleaving RS 
code (CIRC code) used in the compact-disc industry. 

As Shiozaki [5] points out, by using the Chinese re- 
mainder theorem together with the Euclidean algorithm, 
an RRP code can be decoded without solving the error- 
locator polynomial and the error-evaluator polynomial. 
The decoder developed in [5] is a general frequency- domain 
implementation type depicted in the second block diagram 
in Fig. 9.2 of [2]. The advantage of the decoder in [5] over 
the decoder in [2] is that both the recursive extension and 
the inverse transform can be replaced by a single polyno- 
mial division. However, the method proposed by Shiozaki 
has the disadvantage that the reconstruction of the cor- 
rupted information polynomial F*(x) from the received 
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symbols involves n polynomial multiplications in GF(q)> 
followed by the operation modulo M(x ), where n is the 
codeword length and M(x) is a product of n polynomials. 
These operations severely lower the decoding speed. 

This article considers RS codes to be a special case 
of the RRP codes and proposes to decode RS codes by 
the use of both the Fermat number transform [6,7] and 
the Euclidean algorithm. The Fermat number transform 
(FNT) eliminates polynomial multiplications and reduces 
the number of multiplications needed to reconstruct F r (x) 
to nlog 2 n. The fast transform decoding scheme proposed 
in this article is faster than the decoding algorithm in [5]. 


II. Some Preliminaries on Finite Fields and 
the Fast Fermat Number Transform 


Let GF(q ) be a finite field, let n be a number that 
divides q — 1, and let 7 be a primitive nth root of unity. 
Define (a^)^ 1 to be a sequence of n elements from GF(q). 
A discrete Fourier transform of this sequence of length n 
is defined by 


n — 1 

Ak = a*7 fc * mod q for (k = 0, 1, . . . , n — 1) (2a) 

i = o 


The inverse discrete Fourier transform of Ak is defined 

by 


a; = n 




U=o 


mod q 


for (i = 0, 1, . . . , n — 1) 
(2b) 


Given that GF(q) is a finite field, let GF(q)[x] be the 
ring of polynomials over GF(q). 

Definition 1 . The two polynomials 7721(2) and 7722(2) 
over GF(q) are said to be relatively prime if and only if 
the greatest common multiple of 7221(2) and 7722(2) is a 
constant in GF(q). 


A direct computation of the transform in Eq. (2a) or 
its inverse transform in Eq. (2b) requires 77(77 — 1) multi- 
plications. 

When q is a Fermat prime, the Fermat number trans- 
form (FNT) over GF(q) can be used. A Fermat prime F m 
is defined by 


Definition 2 . The two polynomials 7771(2) and 7712(2) 
over GF(q) are said to be congruent modulo 771(2), i.e., 
7721(2) = 7712(2) mod 772(2) if and only if 772(2) divides 
7721(2) - 7722(2). 


F m = 2 2m + l for (772 =1,2, 3, 4) 
F m — 2 2 ™ H- 1 for (m = 1,2, 3, 4) 


The Chinese remainder theorem is presented here for 
convenience; proof can be found in [11]. Let M(x ) = 
Wi=l ™i( x ) be a product of pairwise relatively prime poly- 
nomials. Let Ai(x), A 2 (2), . . . , A r (2) be any r polynomials 
such that deg [A* (2)] < deg [222,(2)], i = 1, 2 , . . . , r. Finally, 
let £1(2) satisfy 

tAx ) = 1 mod 772,(2) for (i — 1,2 ,..,, r) 

77ii2 

There then exists one and only one polynomial f(x) 
of GF(q)[x] of degree satisfying deg[/(x)] < deg [Af(sc)], 
which uniquely solves the system of congruences: 

f(x) = Ai{x) mod 772,(2) 

The polynomial f(x) is given by 

f( x ) = j2^f\u(x)Mx)modM(x) (1) 

i = l m, A X / 


It is shown in [6,7] that integer 3 is a primitive 
l = 2 2m th root of unity in GF(F m ). Next, let 72 divide 
2 2>n . Finally, suppose 7 is a primitive 72th root of unity in 
GF(F m ) where 

7 = 3 //n 

The purpose of an FNT of length n is to compute ef- 
ficiently the transform sequence (^4/c)J=o us i n S Eq. (2a). 
On the other hand, the inverse Fermat number transform 
(IFNT) of length n reconstructs the sequence (a;)^ 1 from 
the sequence 04fc)£=o v ^ a Eq- (2b). Since the order of 7 is 
a power of 2 in GF{F m ), the length of the sequence to be 
transformed is a power of 2. As a consequence, the very 
efficient FNT can then be used to yield a fast transform [6] 
which is analogous to the fast Fourier transform (FFT). In 
this case, the number of multiplications involved in evalu- 
ating such a transform sequence of length 72 is 72log 2 72 [8], 
A new type of Fermat number multiplier is developed in 
[9]. More details about the FNT can be found in [6]. 
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F( 7) = F(x) mod mi(x), . . . , 


III. Nonsystematic RS Codes 

First, a set of RRP codes is defined. As shown next, 
these codes are constructed using the Chinese remainder 
theorem for polynomials over a finite field GF(q). Let 
m 0 (x), m i(x), . . and ra„_i(x) be n relatively prime poly- 
nomials, and 

n— 1 

M{x) = JJ 
»=o 

Assume that the degree of each mj(x) is d, and that 
kd information symbols u = (uo, «i, - - ■ , 1 ) are repre- 

sented by the information polynomial as 

F(x) = uq + u\x H h Ukd- ix fci_1 

where mcGF(q) and k < n. Then an RRP code is the 
residue representation of F(x), that is, 

£ = (A 0 (x),Ai(x),...,A n -i(x)) 

where A*(x) = F(x) mod mi(x) and deg[A*(x)] < d. By 
the Chinese remainder theorem, F(x) can be recaptured 
from Ai(x). The vector corresponding to the polynomial 
Ai(x) is named the ith symbol. A code vector £ can correct 
error symbols less than or equal to t symbols if n — k > 2t 

[3,4]. ' 

The following shows that RS codes are a subclass of 
RRP codes. In order to facilitate the fast encoding and de- 
coding procedures, which make use of the fast FNT meth- 
ods as described in Section II, the codeword length n is 
required to be a power of 2 . 

Let m 0 (x),mi(x) J ...,m n _i(x) be n relatively prime 
polynomials given by 

m,*(x) = x — 7 * for (i = 0 , 1 , . . . ,n — 1 ) 

Also let the k information symbols 

(tx 0 , V,‘eGF(?) 

be denoted by the information polynomial 

F(x) ~ u 0 + uix + h ix * -1 

Then the equations 

F(l) = F(x) mod m 0 (x) 


and 

F( = F(x) mod m„_i(x) 
lead to a code vector £ represented by 

v=(A 0 ,A u ...,A n - 1 )= (F(l), F(y ), .... F( y n ~')) 

The code vector £ is a nonsystematic RS codeword. 
It is not difficult to see that y_ — (Ao, Ai, , . . , A n _i) is 
just the FNT of the sequence (u 0) uy, . . . , u*_i, 0, , . . , 0) 
and the k information symbols (u 0 , «i, . . . , u*_i), i.e., 
F(x) can be recaptured by an IFNT on the code vector 
£ = (Ao, Ai, . . . , A n _i). 

On the other hand, since an RS code is a special case 
of an RRP code, the information polynomial F(x) can be 
recaptured also from £ = (Ao, Ai, . . . , A n _ 1 ) by the use of 
the Chinese remainder theorem. Let <*(x) denote a poly- 
nomial that satisfies 

— 7 ^ ~ti(x) = 1 mod rrii(x) for ({ = 0, 1, . . . , n — 1 ) (3) 
m t (x) 

where 

n — 1 n — 1 

M(x) = Mi{x ) = Jp* - 7 1 ) 

i=0 t=0 

Then the information polynomial F(x) can be recon- 
structed as 

F(x ) = V' ¥^- ti(x)Ai (mod M(x)) 

7 ^> J 

IV. Decoding RS Codes 

As Shiozaki et al. [1,5] point out, by using the Chi- 
nese remainder theorem together with the Euclidean algo- 
rithm, the RRP codes, which include the RS codes, can be 
decoded without solving the error-locator polynomial and 
the error-evaluator polynomial. However, that method has 
the disadvantage that the reconstruction of the corrupted 
information polynomial F'(x) from the received symbols 
involves n polynomial multiplications in GF(q) followed 
by the operation modulo M(x). These operations can sig- 
nificantly lower the decoding speed. A modified decoding 
scheme, which makes use of the fast transform technique 
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to bypass the tedious polynomial multiplications and mod- 
ulo M(x ) operation, is given in the Appendix. 

A. Decoding for Correcting Errors 

The overall decoding of nonsystematic RS codes for 
correcting errors using the Euclidean algorithm is summa- 
rized in the following (see the Appendix for details): 

1. Compute the IFNT of the received code word j/ = 
{A' 0 ,A\,...,A' n _ i) from Eq. (A-l) in the Appendix to 
obtain 

F'(x) = u' 0 + u\x + • ■ • + u'„_ix n-1 

in Eq. (A-3). Next, calculate the degree of F'(x ). If 
deg[F'(x)] < k, where k is the number of information 
symbols, then the information polynomial F(x) = F'(x); 
otherwise, go to step 2. 

2. To determine the error-locator polynomial D(x) in 
Eq. (A-5) and F'(x)D(x), apply the Euclidean algorithm 
to M(x) defined in Eq. (3) and F'(x). The initial val- 
ues of the Euclidean algorithm are Pi(x) = 0,p 0 (^) = 
l,r_i(x) = Af(x), and r 0 (x) = F'(x). The iterative 
procedure of the Euclidean algorithm terminates when 
deg[r*(x)] < n — [(d — 1)/2J where [xj denotes the great- 
est integer less than or equal to x. 

3. Compute F(x) from Eq. (A-14). 

A flowchart of a decoding algorithm to correct errors 
only is depicted in Fig. 1. An example of this decoding 
scheme is given in Example 1. 

B. Decoding to Correct Errors and Erasures 

Shiozaki [5] suggests a decoding scheme to correct 
both errors and erasures. This algorithm ignores the era- 
sure locations and uses the Chinese remainder theorem and 
the Euclidean algorithm to decode the shortened RS code- 
word. However, the shortened codeword loses the FFT 
structure; thus, a fast transform decoding scheme cannot 
be used. In this section, an improved decoding scheme 
is suggested which uses the fast- transform techniques dis- 
cussed in the previous sections to decode RS codewords 
with both errors and erasures. 

Suppose an RS codeword is transmitted through a 
noisy channel. Let there be s erasure symbols and t error 
symbols in the codeword such that 2t -j- s < n — k. Next, 
assume that the symbols at positions ki 1 k 2i • . . , k 8 are era- 


sure symbols and that the symbols at positions , t 2 , . . . , 1% 
are error symbols. Finally, define 

9 

D^x) = P[( X_ '!'*') (known) (4) 

t = l 

and 

t 

D 2 (x) = JJ(x - y li ) (unknown) 

i=l 

and 

D(x) = Di(x)D 2 (x) 

By an extension of the derivation of the key Eq. (A-9) 
given in the Appendix, the following key equation for both 
errors and erasures can be obtained: 

^M(x)B(x) F f (x)D 1 (x)D 2 (x) = F(x)D l {x)D 2 {x) 

( 5 ) 

where B(x) is as defined in Eq. (A-5) in the Appendix, 
deg [D 2 (x)] < L(d-l-s)/2j, and deg[F(x)Di(x)D 2 (x)] < 
n _|_(d-l_s)/2j-l. 

The Euclidean algorithm is an iterative procedure 
which can be used to find in Eq. (5) the greatest common 
divisor (GCD) of M(x) and F'(x)Di(x) [10], An impor- 
tant intermediate relationship among the polynomials of 
the Euclidean algorithm is given in the equation 

F'(x).Di(x)p;(x) -f M(x)si(x) = r,(x) (6a) 

and 

deg[p,(x)] -f deg[r*(x)] < deg[Af(x)] for - 1 < i < m 

(6b) 

where i is the iterative index and r m (x) is the GCD of 
F'(x)Z>i(x) and M(x). The algorithm involves four se- 
quences of polynomials: s*(x), Pt(^), r,*(x), and <fr(x). The 
initial conditions are set in accordance with the following 
rules: 

1. For deg[F , (x)Di(x)] < deg[M(x)], set s_i(x) = 1, 
*o(*) = 0, p-i(x) = o, Po(x) = 1, r_j(x) = M(x), and 
r 0 (x) = F'(x)Di(x). 
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2. For deg[F'(x)Di(x)] > deg[M(x)], set s_i(x) = 0, 
sq ( x ) - 1, pi(x) = 1, p 0 (*) = 0, r_x(x) = F'(x)F>i(x), 
and ro(x) = M(x). 

Since 2t + s < n — fc, 


mation polynomial F'(x) in a manner analogous to syn- 
drome computation in the conventional decoding schemes. 
However, this new algorithm does not require the extra 
steps needed to solve the error-locator and error-evaluator 
polynomials. 


deg[£> 2 (a:)] + deg[F(x)Di(x)D 2 (x)] 


2^ + ^-j-Jb — 1 <n 
deg[M(x)] 

( 7 ) 


Therefore, let 2t -f $ < n — fc, u = [(d — 1 — s)/2j , and 
v = n — l(d- 1 — s)/2J — 1. By the proof of the theorem in 
the Appendix and Eqs. (5), (6a), (6b), and (7), there ex- 
ists a unique index j in the Euclidean algorithm such that 
D 2 (x) = A (x)pj(x) and F{x)D\{x)D 2 {x) = A(x)r ; (x), 
where A(x) is some polynomial, deg[p ; (x)] < [_(c£ — 1 — ^) /2J , 
and deg[rj(x)] < n — [( d — 1 — s)/ 2J. Thus, F(x) can be 
reconstructed as follows: 


F(x) 




( 8 ) 


The overall decoding of nonsystematic RS codes for 
correcting errors and erasures using the Euclidean algo- 
rithm is summarized in the following steps: 


1. Use step 1. from the description of decoding for 
correcting errors. 


C. Examples of the Two Decoding Methods 

Example 1. Consider the Fermat prime F3 = 17, and 
let k = 4. This is an (8,4) RS code over GF(17), which is 
capable of correcting two errors or less. It is shown in [6] 
that 7 = 2 is a primitive 8th root of unity. Also, for this 
case, 


1=7 

M (x) = PJ(x — 7 *) = x 8 — 1 
i= 0 

Let the four information symbols be u = (2, 3, 1,4). 
Then F(x) = 2 -1- 3x 4* x 2 + 4x 3 . An FNT on the sequence 
(2, 3, 1, 4, 0,0,0, 0) yields the codeword v = (10, 10, 14, 13, 

13.2.5.0) . Next, let the third and seventh symbols be er- 
roneous. Thus, e = (0, 0, 5, 0, 0, 0, 15, 0) and v[ — (10, 10, 2, 

13.13.2.3.0) , where e, and 1 / are as defined in the 

Appendix. After taking the IFNT on //, one obtains 
F'(x) = 13 + 8x + 7x 2 -I- 16x 3 + llx 4 + 5x 5 + 6x 6 + 12x 7 . 
The Euclidean algorithm stops after the second iteration 
to yield r 2 (x) — 10x 5 + llx 4 + 9x 3 + 16x 2 + 16x -f 5 and 
p 2 (x) = llx 2 -f 11. Then F(x) is recaptured as 


2. Compute the erasure-locator polynomial D\(x) 

from Eq. (4). Next, compare deg[F'(x)£)i(x)] with 
deg[M(x)]. If deg[F / (x)D 1 (x)] < deg[M(x)], set p_i(x) = 
0, p 0 (*) = 1, r_i(x) = M(x), and r 0 (x) = F'(x)Di(x); 
otherwise, set p_i(x) = 1, po(x) — 0, r_i(x) — 

F'(x) J Di(x), and r 0 (x) = M(x). 

3. To determine the error-locator polynomial D 2 (x) 
and F'(x)D(x), apply the Euclidean algorithm to M{x) 
and F'(x)Di(x ). The initial values of the Euclidean algo- 
rithm are defined in step 2; the iterative procedure of the 
algorithm terminates when deg[r,(x)] < n— [(d— 1 — s)/2j . 

4. Compute F(x) from Eq. (8). 

A flowchart of the decoding scheme for correcting both 
errors and erasures is given in Fig. 2. A depiction of this 
decoding scheme is presented in Example 2. 

This simpler, faster transform-decoding scheme using 
the FNT for RS codes is particularly suitable for pipeline 
VLSI implementation. The transform-decoding scheme 
utilizes an efficient FNT to compute the corrupted infor- 


F(x) = ^4 = 2 + 3x + a; 2 + 4x 3 

P2\X) 

That is, u = (2, 3, 1, 4). 

Example 2. Consider the same codeword y_ = 
(10, 10, 14, 13, 13, 2, 5, 0) given in Example L Let the first 
symbol be an error symbol, and the third and seventh sym- 
bols be erasure symbols. Thus, e = (1,0,5,0,0,0,15,0), 
and j/ = (11,10,2,13,13,2,3,0). After the IFNT is taken 
of v * , one obtains F 7 (x) = llT6x-h5x 2 -|- 14x 3 +9x 4 H-3x 5 -{- 
4x 6 + 10x 7 . Since the erasure symbols are at the third and 
seventh positions, D\(x) = (x — 2 2 )(x — 2 6 ) = x 2 -f 1. Thus, 
F'(x)F>i(x) = 10x 9 + 4x 8 -f 13x 7 +13x 6 -f 14x 4 +3x 3 -f 16x 2 -f 
6x H- 11. The Euclidean algorithm stops after the second 
iteration to yield r 2 (x) = x 6 + 12x 5 + 10x 4 + 16x 3 + 4x + 8 
and p 2 {x) = 13x -f 4. Then F(x) is recaptured as 

F(x) = F\nr T = 2 + 3x + a: 2 + 4x 3 
p 2 (x)D l (x) 

That is, u — (2, 3, 1, 4). 
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V. Conclusions 

In this article, a fast transform decoding scheme is in- 
troduced which is particularly suitable for VLSI implemen- 
tation. This scheme first utilizes the highly efficient Fermat 
number transform to calculate the corrupted information 


polynomial F'(i :). It then uses the Euclidean algorithm to 
evaluate the information polynomial F(x) directly, with- 
out going through the intermediate steps of solving the 
error-locator and error-evaluator polynomials. Thus, this 
fast- transform decoding scheme is faster and simpler than 
the decoding scheme in [1]. 
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Appendix 

Decoding RS Codes Using the Euclidean Algorithm 


Suppose the codeword £ — (Ao, Ai, * , A n _i) is 

transmitted through a noisy channel. Assume that the 
symbols at positions an ^ £t are in error. The 

received codeword t/ is thus represented by 

v' = v + e = (A' 0 ,A' l ,...,A' n _ 1 (A-l) 


and 


E{x) 


E 


M(j) 

m^x) 


it,( x ) e t i 


mod M(x) 


where e is the error vector defined by 

e = (0, . . . , et t , 0, . . . , e ti , . . . , 0)V (A-2) 

Let (u , 0 ,u , 1 ,...,u^_ 1 ) and (w 0 , w lt . . . , w„_i) be the 
inverse transforms of j/ and £ respectively. Also let where 
F'(x) = Wq + w'jX + 1- be defined as the cor- 

rupted information polynomial, and F(x) = Wo + wix + 

be defined as the error polynomial. 


B(x) = 


y D(*) 

"**(*) 


mod D(x) 


D(x)=n mi t (x) 
*=i 


(A-4) 


(A-5) 


It is not difficult to see that the residue representations 
of F'(x) and E(x ), modulo rrii(x) are Eqs. (A-l) and (A-2) 
respectively. That is, i/ and e can be written, respectively, 
as 


is called the error-locator polynomial. The key equation of 
the decoding algorithm is derived from these relationships. 
First, let 


£ ' = (F'(l),F , ( T ) ) ...,n7 n_1 )) 

e= (E( l),E( 7 ),...,E( 7 n - 1 )) 


From Section III, an RS codeword £ is generated by 
an information polynomial F(x) via the following: 


A(x) = 


Mix) 

D(x) 


(A-6) 


1=1 7 


^ = (F(1),F( 7 ) ) ... ) F( 7 ' > - 1 )) 


Then, by Eq. (A-4), one has 


Since £' = £ + e, one obtains F'( j l ) = F( 7 1 ) + E( 7*) 
for 0 < i < n — 1. Thus, there are at least n values of x for 
which F'(x) and F(x) + E(x) are equal. It is obvious that 
deg[F(x)] < fc,deg[F'(x)] < n, and deg[F(x)] < n. Hence, 
by the fundamental theorem of algebra, 

F'(x) = F(x) + E(x) (A-3) [A(x)£'(x)] mod A(x)D(x) (A-7) 


v 7 1 = 1 * 


mod M(x) 


Since RS codes are a special case of RRP codes, it is 
shown in [5] that F f (x) and F(x) can also be reconstructed 
using the Chinese remainder theorem as follows: 


Equation (A-7) can now be re-expressed as: 


E(x) = A(x)[\(x)D(x) + B'(x)] 


F'(x) 


£ 


M(x) 

m P (x) 


fi(x)A' 


mod M{x) 


— A(x) [B'(x) mod D(x)] (A-8) 


138 



where A(x) is some polynomial over the finite field. Using 
Eq. (A-5), a substitution of A(x ) and B'(x) in Eq. (A-6) 
into Eq. (A-8) yields 

e M=t£j b<x> (a ' 9) 

The proof of Eq. (A-9) is similar to the proof given 
in [5]. A similar result of Eq. (A-9) is given by Blahut in 
theorem 9.1.1 of [2] using a spectral technique. The de- 
coder in Fig. 9.2 of [2] applies the Euclidean algorithm to 
M[x) and the 2 1 high-order coefficients of E(x) to deter- 
mine the error-locator polynomial D(x ). Then a recursive 
extension is used to compute the rest of the coefficients of 
E(x ) from the known D(x). Finally, the inverse transform 
over GF(2 n ) of Ej is taken to recover the error pattern. 

The next paragraph describes how the decoder de- 
veloped in this article applies the Euclidean algorithm to 
the polynomials M(x) and F'(x) rather than to the usual 
M(x) and the syndrome polynomial S(x), i.e., the 2 1 high- 
order coefficients of E(x). In other words, to determine 
polynomials D(x) and F(x)D(x), this new decoder applies 
the Euclidean algorithm to M(x) and F*(x). Thus, F(x) 
can be reconstructed from F(x) = F(x)D(x)/D(x). The 
advantage of this new decoder over the decoder developed 
in Fig. 9.3 of [2] is that both the recursive extension and 
the inverse transform can be replaced by a single polyno- 
mial division. 

By combining Eqs. (A-3) and (A-9), the key equation 
is obtained as follows: 

-M{x)B(x) + F , (x)D(x) = F(x)D(x) (A-10) 
where B(x) is defined as in Eq. (A-5). 

The Euclidean algorithm is an iterative procedure to 
find the greatest common divisor (GCD) of M(x) and 
F'(x) [10]. An important intermediate relationship among 
the polynomials of the Euclidean algorithm is given in the 
following: 

-M(x)si(x) + F'(x)pi(x) = Vi(x) (A-ll) 

and 

deg [Pi (a)] + deg [r<(x)] < deg [M(x)] 

and 

for - 1 < i < m (A-12) 


where i is the iterative index, and r m (x) is the GCD of 
F*(x) and M(x). The algorithm involves four sequences 
of polynomials: s*(x), Pi(x), r i( x )> anc ^ ?»( x )* The initial 
conditions are: s_i(x) = 1, so( x ) = 0, p-\(x) = 0, po( x ) — 

1, r_ i(x) = M(x), and r 0 (x) = F'(x); g_i(x) and q 0 (x) 
are not defined. 

The following lemma and theorem [10] show that the 
Euclidean algorithm can be applied to the key Eq. (A-10) 
to solve for the information polynomial F(x). 

Lemma. Given two non-negative integers p and v 
with v > deg[r m (x)] satisfying \i -f v = deg[Af(x)] - 1, 
there exists a unique index j, 0 < j < m, such that 

deg[py(x)] < p 

and 

deg[r ; (x)] < v 

For the proof, see [10]. 

Using the above lemma, the following theorem can be 
proved [10]: 

Theorem. Suppose p(x), s(x), and r(x) are nonzero 
polynomials satisfying 

— M(x)s(x ) + F'(x)p(x) = r(x) 

and 

deg [p(x)] + deg [r(x)] < deg [M (x)] 

There then exists a unique index j, 0 < j < m, and a 
polynomial A(x) such that 

p(x) = A(x)pj(x) 

and 

r(x) = A(x)rj (x) 

Now let n — k = 2T, where T is the maximum number 
of errors in an RS code which can be corrected. If the 
number of errors t in a received RS codeword is less than 
or equal to T, then deg [D(x)] < T and deg [F(x)D(x)] < 
k + T- l = n- T-l. Thus, 

deg [Z>(x)] + deg [F(x)D(x)] < deg [Af (x)] = n (A-13) 
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Thus, let n - k > 2t, u = T, and v — deg [M(x)] — 1 — 
jj — n — T— 1. By the proof of the above theorem and Eqs. 
(A-10), (A-ll), (A-12), and (A-13), there exists a unique 
index j in the Euclidean algorithm such that D(x) = 
A (x)pj{x) and F(x)D(x) = A(x)rj(x), where deg \pj(x)] < 


T and deg[rj(x)] < n — T — 1. Thus, F(x ) can be recon- 
structed as: 


F(x) = 


r j( x ) 

Pj( x ) 


(A-14) 
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